on v2015+, it is possible to do this with scripting and have it check if the user is/is not a member of a role that has been set up to identify users that can/cannot email. A post load script can check the role and then reload the paperless output box with limited values or set it to print and then lock/disable it. getting the script on the panel is a little tricky though since the library has customize=no but you can take any other library/panel combo that can be customized, add the script to it and then dfdm MAS_SYSTEM\CM_UIScriptSettings and change the library and panel key field values (remove old key on each field change) or just dfdm SO_InvoicePrinting.M4L.